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Top Stories 

• Pacific Gas & Electric Co., officials reported that at least 65,000 homes and businesses lost 
power across the San Francisco Bay Area for over 3 hours June 8-9 in heat-related outages. 
- San Francisco Chronicle (See item 1) 

• The U.S. Department of Agriculture reported June 8 that liquid, dried, and frozen egg 
products will be imported from the Netherlands due to a shortage caused by the spread of 
the avian flu. - KCCI 8 Des Moines (See item 11) 

• Crews are working to install a temporary water line to service 250 Logan County, Colorado 
residents that have been without running water due to a main break during the week of 
June 1. - KUSA 9 Denver (See item 13) 

• The White House Office of Management and Budget issued the HTTPS-Only Standard 
directive June 8, requiring all public Federal Web sites to switch to HTTPS connections by 
December 31, 2016. - White House Office of Management and Budget (See item 27) 
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Energy Sector 



1. June 9, San Francisco Chronicle - (California) Power outages hit 65,000 in Bay 
Area, slow BART. Pacific Gas & Electric Co., officials reported that at least 65,000 
homes and businesses lost power across the San Francisco Bay Area for over 3 hours 
June 8 - 9 in heat-related outages, including an East Bay blackout reportedly caused by 
a squirrel in an El Cerrito substation that knocked power out to 45,000 customers and 
the Downtown Berkeley Bay Area Rapid Transit (BART) station. The heat also 
affected BART service on the Daly City line. 

Source: http://www.sfgate.com/bayarea/article/Power-outages-hit-thousands-in-San- 
Jose-East-Bay-6314969.php 

2. June 8, Securityweek - (International) XZERES fixes CSRF vulnerability in small 
wind turbine. XZERES Wind released a patch to address a cross-site request forgery 
(CSRF) vulnerability in its 442SR wind turbine web-based interface in which a remote 
attacker could hijack user sessions and cause a loss of power for all attached systems. 
Source: http://www.securityweek.com/xzeres-fixes-csrf-vulnerabilitv-small-wind- 
turbine 

[ Return to top ] 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

3. June 8, Kingston Reporter - (Massachusetts) Pilgrim Station: NRC says Pilgrim 
should have prevented valve failures. The U.S. Nuclear Regulatory Commission 
issued a preliminary “white” finding in the week of June 1 to the Pilgrim Nuclear 
Generating Station in Plymouth, Massachusetts, following an inspection into a January 
scram that occurred after the plant suffered a loss of outside power. The inspectors 
found that internal damage to a safety valve which resulted in complications during the 
shutdown process could have been prevented through proper maintenance. 

Source: http://kingston.wickedlocal.com/article/20150608/NEWS/150609027 

[ Return to top ] 

Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

4. June 9, Bay Area News Group - (National) RPM Mortgage fined $20 million over 
loan scheme. The U.S. Consumer Financial Protection Bureau issued $20 million in 
fines June 8 to RPM Mortgage and the company’s CEO following allegations that he 
paid employees bonuses to place clients in loans with higher interest rates from 201 1 — 
2013. RPM Mortgage agreed to settle the allegations without admitting wrongdoing. 
Source: http://www.santacruzsentinel.com/business/20150608/rpm-mortgage-fined-20- 
million-over-loan- scheme 



For another story, see item 26 
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Transportation Systems Sector 

5. June 9, WHIO 7 Dayton - (Ohio) Piglet death toll rises in U.S. 35 semi crash. U.S. 35 
West in Xenia Township was closed for 8 hours overnight June 8 while crews cleared 
the scene of crash after an overturned semi-truck released and killed approximately 
1,100 of the 2,200 feeder pigs that were being hauled, and injured 1 person. 

Source: http://www.whio.com/news/news/local/semi-crashes-on-us-35-west-at- 
xenia/nmYcr/ 

6. June 9, WCBS 2 New York - (New Jersey) Deadly tractor-trailer crash shuts down 
Route 3 WB in Rutherford. The westbound lanes of Route 3 in Rutherford were shut 
down for several hours June 8 while crews investigated the death of one person after a 
semi-truck struck the Orient Way Bridge, causing its container to dislodge and crush a 
vehicle. 

Source: http://newvork.cbslocal.com/2015/06/08/route-3-crash-rutherford/ 

7. June 8, USA Today - (California) Broken toilets: Hawaii-bound Boeing 767 diverts 
to UAX. An American Airlines bound for Honolulu from Dallas/Fort- Worth diverted to 
Los Angeles June 7 after 3 of their 6 toilets stopped working, delaying the flight for 
about 2 hours while maintenance crews fixed the problem. 

Source: http://www.usatodav.com/storv/todavintheskv/2015/06/08/broken-toilets- 
cause-honolulu-bound-iet-to-divert-to-lax/2867 1397/ 

8. June 8, USA Today - (Florida) Allegiant plane makes emergency landing. An 
Allegiant Air plane headed to Hagerstown Regional Airport in Maryland was forced to 
return to St. Pete-Clearwater International Airport to make an emergency landing 
shortly after takeoff June 8 and evacuated the plane following passenger reports of an 
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electrical burning smell. Officials reported that four passengers were taken to local 
hospitals with minor injuries and the airline plans to reschedule the flight for June 9. 
Source: http://www.usatodav.com/storv/news/nation/2015/06/08/allegiant-plane- 
makes-emergency-landing/287 1 1 607/ 

For another story, see item 1 
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Food and Agriculture Sector 

9. June 8, Quad-City Times - (Iowa) New case added to the bird flu list. Iowa State 
officials reported June 8 that another case of the avian flu was found in Sioux County 
after initial tests showed positive traces of the disease within a flock of 3,800 birds. The 
property was quarantined and the birds will be euthanized once further tests are 
conducted. 

Source: http://qctimes.com/news/local/govemment-and-politics/new-case-added-to- 
bird-flu-list/article 5cb8ceed-la8b-5625-88da-e0effa0dcf6f.html 

10. June 8, Detroit Free Press - (Michigan) Fast-spreading bird flu found in wild 
Michigan geese. Michigan State officials reported June 8 that its first case of the avian 
flu was found in 3 young Canada geese near ponds at the Lakeside Mall in Sterling 
Heights, Michigan, May 28 - June 1. The State plans to monitor a 10-mile radius from 
where the infected birds were found. 

Source: http://www.freep.com/story/news/local/michigan/macomb/2015/06/08/fast- 
spreading-bird-flu-found-wild-michigan-geese/287 13075/ 

11. June 8, KCCI 8 Des Moines - (Iowa) New bird flu cases emerge; U.S. to import egg 
products from Netherlands. The U.S. Department of Agriculture reported June 8 that 
egg products such as liquid, dried, and frozen eggs will be imported from the 
Netherlands due to a shortage caused by the spread of avian flu. 

Source: http://www.kcci.com/news/new-bird-flu-cases-emerge-us-to-import-egg- 
products-from-netherlands/33474372 

For another story, see item 5 
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Water and Wastewater Systems Sector 

12. June 9, WTEN 10 Albany - (New York) Water main breaks in Waterford, boil 
water advisory in effect. Officials issued a boil advisory for several days June 9 in 
Waterford while crews make repairs to a water main break on Fonda road that left 
many customers without water. 

Source: http://newsl0.com/2015/06/09/water-main-breaks-in-waterford-boil-water- 
advisory- in-effect/ 
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13. June 8, KUSA 9 Denver - (Colorado) Colo, town without water for more than a 
week. Crews are working to install a temporary line to get water running for 250 
residents of Logan County that have had no access to running water service since a 
water main beak occurred the week of June 1. The temporary line is expected to be 
finished by the week of June 15 and a permanent solution will take several months, 
leaving residents to rely on drinking water from Red Cross and nearby towns. 

Source: http://www.9news.com/storv/news/local/2015/06/Q8/ne-colorado-town-of-iliff- 
without-water-for-more-than-a- week/28706837/ 
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Healthcare and Public Health Sector 

14. June 8, New York Times - (National) Tuberculosis case prompts search for patient’s 
fellow airline passengers. Health officials are working to trace potential contacts of a 
woman who traveled from India to Chicago in April and later visited Missouri and 
Tennessee before being admitted to a hospital in Bethesda, Maryland, where she was 
given a diagnosis of extensively drug-resistant tuberculosis. The U.S. Centers for 
Disease Control and Prevention issued a statement June 8 stating the risk to the public 
is low. 

Source: http://www.nytimes.com/2015/06/09/science/tuberculosis-case-prompts- 
search-for-patients-fellow-airline-passengers.html? r=l 

15. June 8, Threatpost - (National) Many drug pumps open to variety of security flaws. 
A security researcher revealed severe vulnerabilities in several drug-infusion pumps 
manufactured by Hospira, including the Plum A+, PCA LifeCare, and Symbiq pumps, 
which run the same software as the known-susceptible PCA3 and PCA5 pumps. An 
unauthenticated remote root shell and hard-coded local credentials are among the 
vulnerabilities which leave the devices open to security risks. 

Source: https://threatpost.com/many-drug-pumps-open-to-varietv-of-securitv- 
flaws/113202 



[ Return to top ] 



Government Facilities Sector 

16. June 9, WVIT 30 New Britain - (Connecticut) 3 disabled students, monitor injured in 
Wolcott bus crash. Officials are investigating the cause of an accident that injured 
three students and one bus monitor June 9 after a small Tyrrell Middle School Bus lost 
control and crashed into a tree in Wolcott. 

Source: http://www.nbcconnecticut.com/news/local/Three-Students-Monitor-Seriously- 
Iniured-in-Wolcott-Bus-Crash-306535201.html 

17. June 8, WPVI 6 Philadelphia- (Pennsylvania) Fire shuts down Ben Franklin High 
School in Spring Garden. Approximately 450 students from Benjamin Franklin High 
School in Philadelphia were evacuated June 8 following a fire which started in a 
classroom. No injuries were reported and the school is expected to reopen June 9. 
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Source: http://6abc.com/education/fire-shuts-down-ben-franklin-high-school/772776/ 



18. June 8, Securityweek - (National) US Army website hacked: officials. The U.S. 
Army’s official Web site was shut down June 8 after hackers claiming to be affiliated 
with the “Syrian Electronic Army” posted messages denouncing U.S. training of rebel 
fighters in Syria. No classified or personal data was housed on the Web site, and 
officials reported that no data was stolen. 

Source: http://www.securityweek.com/us-army-website-hacked-officials 
For another story, see item 27 
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Emergency Services Sector 

19. June 9, Tulsa World - (Oklahoma) Inmate escapes from minimum-security 
McAlester prison. An inmate from the Jackie Brannon Correctional Center in 
McAlester, Oklahoma escaped June 8 after serving time for several offenses including 
theft-related crimes and animal cruelty. An investigation is ongoing to find the escapee. 
Source: http://www.tulsaworld.com/homepagelatest/inmate-escapes-from-minimum- 
security-mcalester-prison/article Uc8740a-ef66-5844-b225-f5dec5229cdc.html 

20. June 9, USA Today - (Texas) Texas police officer in pool party video identified. A 

McKinney, Texas police officer was put on administrative leave June 8 after forcibly 
handling a minor to the ground when responding to a disturbance call June 5. A 
complete investigation is ongoing to assess the incident. 

Source: http://www.usatodav.com/story/news/nation/2015/06/08/texas-police-officer- 
reaction-pool-p art y/2 8673177/ 

21. June 8, Reuters - (South Carolina) South Carolina ex-police officer indicted in death 
of black man. A former North Charleston police officer was indicted June 8 for 
allegedly shooting and killing a man as he ran from a traffic stop in early April. An 
investigation is ongoing to fully evaluate the case. 

Source: http://www.reuters.com/article/2015/06/08/us-usa-police-south-carolina- 
idUSKBN0001V520150608 

22. June 8, Asbury Park Press - (New Jersey) NJSP fire tear gas at Summer Jam 
Concert Crowd. A violent altercation at the Hot 97 Summer Jam at the MetLife 
Stadium in East Rutherford, New Jersey prompted the response of multiple units of 
State police after concertgoers caused a logjam in the entryway and threw bottles at 
police, causing 10 troopers to sustain minor injuries. An armored State Police vehicle 
disrupted the crowd and 61 people were arrested in the incident. 

Source: http://www.app.com/storv/news/crime/iersev-mavhem/2015/06/07/hot- 
summer-iam-concertgoers-throw-bottles-state-police/28663905/ 



[Return to top ] 
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Information Technology Sector 



23. June 9, BBC - (International) Cyber- thieves cash in from malware. Security 
researchers at Trustwave reported that cyber-thieves can earn almost 1,500 percent 
potential profit from ransomware kits by spending approximately $5,900 on kits that 
could earn about $90,000 a month in an attack campaign via a compromised Web site. 
Source: http://www.bbc.com/news/technology-33048949 

24. June 9, Softpedia - (International) HDD firmware altering modules from Equation 
Group may exist for Apple devices. Security researchers from the Intel Corporation’s 
McAfee Labs analyzed samples of EquationDrug hard-drive reprogramming modules 
in their May McAffee Labs Threats Report and found indications that versions of the 
module exist for Apple iOS and OS X systems, as well as Microsoft Windows. 

Source: http://news.softpedia.com/news/HDD-Firmware-Altering-Modules-from- 
Equation-Group-May-Exist-for-Apple-Devices-483763.shtml 

25. June 9, Reuters - (International) High-tech extortion attacks nearly doubled in first 
quarter, report says. Findings from the Intel Corporation’s May McAfee Labs Threats 
Report revealed that high-tech extortion schemes via ransomware surged by 165 
percent to 700,000 samples in the first quarter of 2015, and that Adobe Flash malware 
increased by 317 percent to 200,000 samples. 

Source: http://www.reuters.com/article/2015/06/09/us-cvbersecuritv-ransomware- 
idUSKBN0OP09P201506Q9 

26. June 8, SC Magazine - (International) Vawtrak banking malware found to use 
Tor2Web. Security researchers from Fortinet reported that the Vawtrak banking 
malware, also known as Neverquest, is using Tor2Web as a method to steal banking 
credentials undetected by accessing Tor anonymous network sources without directly 
connecting to the network or using a Tor client. The malware typically used fixed 
command-and-control (C&C) servers, which are easier to trace. 

Source: http://www.scmagazine.com/fortinet-posts-new-vawtrak-blog- 
post/article/419355/ 

27. June 8, White House Office of Management and Budget - (International) HTTPS- 
everywhere for government. The White House Office of Management and Budget 
issued the HTTPS-Only Standard directive June 8, requiring that all publicly accessible 
Federal Web sites and Web services only provide service through Hyper Text Transfer 
Protocol Secure (HTTPS) connections by December 31, 2016. The U.S. Chief 
Information Officer set up a Web site to provide technical assistance and best-practices 
for migration as well as a public dashboard to monitor progress. 

Source: https://www.whitehouse.gov/blog/2015/06/08/https-evervwhere-government 

For additional stories, see items 2, 15, and 18 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

See item 24 
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Commercial Facilities Sector 

28. June 9, KHOU 11 Houston - (Texas) 20 units damaged in 2-alarm apartment fire. A 
2-alarm fire in west Houston severely damaged the Reserve at Limestone Apartments, 
leaving 20 apartment units destroyed. No injuries were reported and the cause of the 
fire is under investigation. 

Source: http://www.khou.com/storv/news/local/2015/06/08/several-units-damaged-in- 
2-alarm-apartment- fire/28707083/ 

29. June 9, KXTV 10 Sacramento - (California) Man detained in connection with 
apartment fire in South Sacramento. Sacramento Police Department officials 
reported that a man had been detained in connection to a June 9 two- alarm fire at the 
Pine Manor apartments in Sacramento that displayed several families and resulted in 
smoke or fire damage to seven units 

Source: http://www.newslO.net/storv/news/local/south- 

sacramento/2015/06/09/firefighters-battle-south-sacramento-apartment- 

blaze/28729451/ 

30. June 9, Huntsville Times - (Alabama) Lightning apparent cause of Rainbow City 
apartment fire. A Dogwood Trace Apartment complex in Rainbow City, Alabama 
sustained extensive damaged from a June 9 fire supposedly caused by lightning that left 
eight apartment units destroyed. No injuries were reported. 

Source: http://www.al.com/news/anniston- 
gadsden/index.ssf/2015/06/lightning apparent cause of ra.html 

31. June 9, KTRK 13 Houston - (Texas) At least 1 injured in 3-alarm fire at NW 
Houston apartment complex. The Houston Fire Department reported June 9 that a 
three-alarm fire at an apartment complex hospitalized one woman while the complex 
sustained extensive damage. Over 40 firefighters responded to the incident, and the 
department’s arson bureau will investigate the blaze. 

Source: http://abcl3.com/news/at-least-l-injured-in-3-alarm-fire-at-nw-houston- 
apartments/774085/ 
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32. June 8, Associated Press - (Nevada) 20 people displaced after apartment blaze in 
Las Vegas. The Deputy Clark County Fire Chief reported June 8 that 20 residents were 
displaced due to an apartment complex fire in Las Vegas that damaged a second- floor 
apartment and 3 neighboring units. Estimated damages total $50,000 and the cause of 
the fire is under investigation. 

Source: http://www.ktvn.com/storv/29266926/20-people-displaced-after-apartment- 
blaze-in-las-vegas 

33. June 6, Spencer Fane Britt & Browne LLP - (Alabama) Warehouse and distribution 
center lined $3 million for anhydrous ammonia release from its industrial 
refrigeration system. The U.S. Environmental Protection Agency and the U.S. 
Department of Justice agreed upon a $3 million settlement with Millard Refrigerated 
Services that resolved alleged violations of the Clean Air Act, Liability Act, and other 
safety violations, following a 2010 incident in which an Alabama facility released 
ammonia gas that sickened employees. 

Source: http://www.lexologv.com/librarv/detail.aspx?g=c6a0ebcd-dae9-4c03-a092- 
0f7aef8327cb 
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Dams Sector 



Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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